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This  is  CWC-66-06. 

1[1 . (U)  The  CW  Delegation  had  a quiet  week  with  no  meetings 
scheduled  for  the  foreseeable  future.  Delegates  took  the 
opportunity  to  host  the  new  South  African  delegate  Martinus 
Van  Schalkwijk  to  lunch  and  found  him  to  be  a personable  and 
experienced  multilateral  diplomat. 


Security  Audit 


1L2 . (U)  The  Security  Audit  Team  (SAT)  convened  18  to  21  July, 
which  was  the  next  stage  of  the  broader  Verification 
Information  System-Industry  (VIS-I)  audit  scheduled  to  be 
concluded  in  October  2006.  The  fuíl  audit  of  the  VIS-I 
module  will  include  all  Industry  Declaration  processing,  as 
well  as  the  Site  Selection  Module.  The  October  review  will 
focus  on  integration  of  each  Industry  module,  security,  and 
document  processing.  Due  to  the  scope  of  the  upcoming 
October  audit,  the  SAT  wanted  to  evaluate  the  Document 
Tracking  System  (DOTS)  before  the  October  audit.  DOTS  is  an 
expanded  document  system  that  incorporates  the  f unctionality 
of  the  existing  stand-alone  archive  management  system  (AMS) 
and  will  be  integrated  into  the  VIS  running  on  the  Secure 
Critical  Network  (SCN).  Once  fully  integrated,  it  will 
provide  the  TS  with  links  to  the  existing  EDMS  (electronic 
document  management  system)  as  well  as  report  capability  of 
the  status  of  key  documents  processed  by  the  TS . The  audit 
team  found  this  module  to  be  well  designed  and  executed.  The 
TS  will  track  documents  that  originate  in-house  as  well  as 

SIPDIS 

received  from  State  Parties . Security  logging  is  integrated 
with  the  e-Trust  and  Active  Directory  implementation  and 
captures  actions,  dates  of  creation,  and  other  critical 
elements  from  a conf identiality  monitoring  perspective.  DOTS 
also  links  to  scanned  images  for  staff  reference. 

1[3 . (U)  The  audit  team  also  assessed  TS  implementation  of  the 

update/migration  to  e-Trust  software.  This  application 
replaced  the  CA  Unicenter  TNG  software  used  to  generate 
system-wide  audit  logs  on  the  SCN.  The  SAT  found  that  this 
migration  project  was  a success  for  both  the  TS  technical 
staffs  involved  (ISB  and  OCS).  The  project  resulted  in  a 
timely  delivery  with  minimal  interruption  of  service,  being 


executed  over  a weekend  and  totally  transparent  to  the  end 
user.  The  process  proved  that  the  TS  project  teara 
coordinated  requirements  and  system  specif ications , performed 
an  adequate  risk  assessment,  conducted  staff  training,  and 
tested  the  application  prior  to  implementation . While 
e-Trust  logging  has  been  used  for  only  three  weeks , the 
Secretariat  is  working  on  establishment  of  adequate  filters 
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and  was  able  to  demonstrate  that  it  is  are  capturing  all 
relevant  data  for  OCS . OCS  and  ISB  will  continue  to 
fine-tune  the  log  file  filters  and  have  been  notified  that 
the  SAT  will  be  conducting  an  in-depth  evaluation  in  October. 

1[4 . (U)  The  TS  development  team  continues  to  work  together  and 
is  expecting  to  finalize  the  Industry  and  Site-Selection 
modules  as  per  the  original  timetable.  The  staff  relayed 
some  concern  about  two  key  positions  that  might  be  affected 
by  tenure  limits  (those  of  Bento  da  Silva  and  Monica  Bahl). 
Although  the  SAT  did  not  feel  it  appropriate  to  specifically 
address  this  matter,  the  SAT  did  indicate  informally  to  the 
DG  that  the  existing  level  of  expertise  on  the  development 
team  was  a large  factor  in  the  project,s  success.  The  SAT 
also  found  that  the  development  effort  was  no  longer  totally 
dependent  on  personalities , relaying  instead  on  process.  The 
DG  acknowledged  that  the  staffing  tenure  was  an  issue,  but 
noted  that  he  had  some  latitude  in  extending  contracts  based 
on  need.  The  new  project  lead,  Per  Runn,  has  assumed  a 
strong  leadership  role  following  the  departure  of  former 
manager  Ruth  Mohlenkamp. 

15.  (U)  The  development  effort  will  include  additional  modules 
for  inspection/mission  planning  and  eventually  will  provide 
similar  access  to  VIS  for  the  Chem  Demil  Branch  within 
Verif ication . Hoorst  Reeps  and  Per  Runn  both  strongly 
supported  leaving  the  VIS  development  team  intact  for  a full 
year  post-VIS  deployment,  to  ensure  that  all  bugs  and  any 
remaining  issues  could  be  resolved.  The  SAT  concurred  with 
this,  and  informally  recommended  this  to  the  DG. 

SANDERS  SENDS . 

BLAKEMAN 


